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IN THE CLAIMS 
Amended claims follow: 

1 . (Previously Presented) A method for identifying unsolicited electronic mail messages 
in a computer network, comprising: 

receiving an electronic mail message; 

removing non-static data including visible end-of-line characters and headers, from the 
electronic mail message; 

generating a checksimi based on data remaining within the electronic mail message; 
comparing the generated checksum with a database contairdng checksums for previously 
identified unsolicited messages; and 

identifying the electronic message as an unsolicited message if the generated checksum 
matches one of fhe database checksums; 

wherein the non-static data is removed to prevent the non-static data from being subject 
to the checksum, so that non-static data forged by spammers does not compromise the 
identification of the electronic message as the unsolicited message. 

2. (Original) The method of claim 1 wherein generating a checksum con^rises 
generating individual checksums for portions of the remaining data. 

3 . (Original) The method of claim 2 wherein the portions comprise lines of data. 

4. (Origiiwi) The method of claim 2 wherein comparing a checksum comprises 
comparing checksums starting with one of the portions at the end of the remaining data 
and working backwards through the data. 

5. (Original) The method of claim 1 wh^ein r^oving non-static material comprises 
removing forwarding information. 

6. -7. (Cancelled) 
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8. (Origiiial) The method of claim 1 further comprising deleting the electronic mail 
message if the message is identified as an unsolicited message. 

9. (Original) The method of claim 1 further comprising at least temporarily storing the 
electronic message if the message is identified as an unsolicited message. 

10. (Original) The method of claim 1 further comprising forwarding the electronic 
message to an intended recipient if the message is not identified as an unsolicited 
message. 

1 1. (Original) The method of claim 1 further comprising updating the database with new 
checksums. 

12. (Original) The method of claim 11 wherein the database is updated based on 
checksums generated &om electronic messages received and identified as an unsolicited 
message. 

13. (Previously Presented) A system for identifying unsolicited electronic mail messages 
in a conqputer network, comprising: 

a message modifier operable to remove non-static data including visible end-of-line 
characters and headers, from an electronic mail message; 

a checksum generator operable to generate a checksum based on data remaining within 
the electronic mail message; 

a database contaming checksums previously identified for unsolicited messages; and 
a detector operable to compare the generated checksum with the database and identify the 
electronic message as an imsolicited message if the generated checksum matches one of 
the database checksums; 

wherein the non-static data is removed to prevent the non-static data from being subject 
to the checksum, so that non-static data forged by spammers does not compromise the 
identification of the electronic message as the unsohcited message. 
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14. (Original) The system of claim 13 wherein the detector is configured to g^erate 
individual checksums for portions of the remaining data. 

15. (Original) The system of claim 14 wherein the portions comprise lines of data. 

16. (Original) The system of claim 14 wherein the detector is configured to compare the 
generated checksums starting with one of the portions at the end of the data and working 
backwards through the data. 

17. (Original) The system of claim 13 wherein the database is configured to receive 
updates. 

18. (Previously Presented) A computer program product for identi^dng unsolicited 
electronic mail messages in a computer network, comprising: 

code that receives an electronic mail message; 

code that removes non-static data including visible end-of-line characters and headers, 
from the electronic mail message; 

code that generates a checksum based on data remaining within the electronic mail 
message; 

code that compares the generated checksum with a database containing checksums for 
previously identified xmsolicited messages; 

code that identifies the electronic message as an unsolicited message if the generated 

checksum matches one of the database checksums; and 

a computer readable medium that stores said computer codes; 

wherein the non-static data is removed to prevent the non-static data from being subject 

to the checksum, so that non-static data forged by spammers does not compromise the 

identification of the electronic message as the imsolicited message. 
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19. (Previously Ammded) The computer product of claim 18 wherein the computer 
readable medium is selected fix)m the group consisting of CD-ROM, floppy disk, tape, 
flash memory, system memory, and hard drive. 

20. (Original) The computer product of claim 1 8 further comprising code that generates 
individual checksums for portiotis of the remaining data. 

21 . (Original) The computer product of claim 20 further comprising code that compares 
the generated checksimis starting with one of the portions at the end of the data and 
woiks backwards through the data, 

22. (Previously Presented) The method of claim 5 wherein the forwarding information 
includes a ">" character. 

23. (Previously Presented) The method of claim 4 wherein the comparing starts with one 
of the portions at the end of the remaining data and works backwards through the data, in 
order to reduce required processing. 

24. (Previously Presented) The method of claim 1 wherein the non-static data is removed 
prior to the checksum being generated. 

25. (CanceUed) 
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